Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File:                     vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier:          F9XKl2W88J2of2k6y+J5SwQ7Aign816F7aQiQEMQIwA=
Subject key identifier:   B0:D0:10:51:F8:76:94:0A:90:F5:B2:4F:FC:6C:4D:BF:70:97:D5:B8
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer:       /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial:       01962F74BAD2176FE445406CA969997EA236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number:          05CC
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: 36lhzs32wDeUse9xgVrwSPPRSoRIF4hDee23dI/jD4g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ba:d2:17:6f:e4:45:40:6c:a9:69:99:7e:a2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=b0d01051f876940a90f5b24ffc6c4dbf7097d5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:d1:b6:64:2e:b3:f9:8f:ca:2b:cc:3d:8d:
                    71:83:6f:f8:71:c4:16:e0:82:6d:2c:fa:a9:7c:81:
                    84:8b:da:43:c7:f8:c8:b2:23:5f:90:86:d8:d1:95:
                    12:9b:e6:59:16:be:87:83:f3:c2:e9:38:cd:4b:d5:
                    88:09:ca:46:6e:c4:47:07:3f:9b:f3:2d:04:49:0f:
                    65:01:bd:80:bc:2e:03:43:1d:d0:97:5c:7c:1c:c7:
                    3e:d5:82:11:08:62:d9:78:8e:0d:95:58:9e:48:0f:
                    c9:94:11:bd:35:3d:bf:5f:ba:b8:53:27:d3:c9:9a:
                    f2:30:35:b1:cf:b4:51:e1:b3:cf:54:c4:77:71:ce:
                    64:0d:cb:2b:77:ca:1c:a3:df:0a:ae:66:74:6c:b1:
                    53:b4:a0:0b:a9:87:43:70:da:71:e3:48:a1:cb:03:
                    13:d2:0f:6f:8d:35:a4:87:f4:9f:0b:f0:59:76:28:
                    3c:f7:51:d6:00:1d:34:11:43:c3:bf:17:02:3f:c1:
                    33:3d:d8:f2:51:79:52:db:c5:0b:32:46:1f:cf:93:
                    be:c7:45:ca:19:4d:7d:a1:1d:2b:ab:20:9c:2c:c2:
                    78:45:f0:e8:7b:df:5a:9a:14:b6:e8:ef:68:12:83:
                    e2:74:2a:8f:84:ab:b1:e9:24:7e:76:27:bb:d1:bb:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D0:10:51:F8:76:94:0A:90:F5:B2:4F:FC:6C:4D:BF:70:97:D5:B8
            X509v3 Authority Key Identifier:
                keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:f8:e6:57:46:be:9b:16:a1:73:97:6a:38:a0:8c:ae:01:
         8d:b0:ff:25:34:56:6c:c3:c7:3c:0a:29:85:ea:b0:f7:95:a4:
         da:7a:e1:16:f9:f8:a5:e2:66:8a:90:1c:79:f8:64:1b:ea:88:
         e2:d5:ea:49:d3:cc:61:95:4e:6f:af:2f:5d:9a:98:36:1e:5e:
         94:e7:f2:0b:5b:10:89:62:a3:3f:86:b7:f8:e7:0b:69:40:8c:
         9c:95:1a:56:18:a2:e2:b6:82:50:ee:74:7f:93:1d:1e:b0:b5:
         50:e0:2f:df:2b:1e:ca:0b:f5:ef:3c:dd:ae:63:4e:08:da:a4:
         fd:fe:df:9d:70:48:fc:4a:9b:99:d0:ee:53:72:22:a1:3c:07:
         0e:33:58:57:73:69:5c:33:1b:a2:52:82:99:af:6c:fd:27:cb:
         bc:ab:c5:37:10:07:72:9c:bd:5f:4d:5b:09:23:63:52:64:8f:
         8e:a2:aa:2b:b9:c4:53:e2:9d:51:4d:53:51:56:1c:a5:bb:b0:
         5c:36:68:96:d9:3d:6c:35:fa:89:58:b4:31:73:c2:ff:56:8f:
         5b:8e:35:6d:62:3c:f6:c0:92:e6:8e:85:da:cd:25:29:1f:4a:
         59:dd:fa:2c:ca:2c:af:c8:49:97:48:03:ec:5f:fa:fc:9a:a5:
         01:08:b4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----